# US 10,482,335 B1 · ATM with biometric security

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,482,335 B1
- Document ID: US10482335B1
- Status: Granted
- Kind: B1
- Application number: 16/380,078
- Filed: 2019-04-10
- Granted: 2019-11-19
- Earliest claimed: 2018-07-09
- Assignees: Capital One Services, LLC
- Applicants: Capital One Services, LLC
- Inventors: Joshua Edwards; Michael Mossoba; Abdelkader Benkreira
- Web page: https://patentgrep.com/patent/US10482335B1

## CPC

- G07F 19/207: {Surveillance aspects at ATMs}
- G06Q 20/1085: {involving automatic teller machines [ATMs]}
- G06Q 20/389: {Keeping log of transactions for guaranteeing non-repudiation of a transaction}
- G06Q 20/40145: {Biometric identity checks}
- G06Q 20/4016: {involving fraud or risk level assessment in transaction processing}
- G06Q 50/265: {Personal security, identity or safety}
- G06V 10/993: {Evaluation of the quality of the acquired pattern}
- G06V 40/70: Multimodal biometrics, e.g. combining information from different biometric modalities
- G07F 19/201: {Accessories of ATMs}
- G07F 19/209: {Monitoring, auditing or diagnose of functioning of ATMs}
- G07F 19/211: {Software architecture within ATMs or in relation to the ATM network}
- H04N 7/183: {for receiving images from a single remote source}
- G06V 40/10: Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
- G06V 40/1365: {Matching; Classification}
- G06V 40/14: Vascular patterns
- G06V 40/172: {Classification, e.g. identification}
- G06V 40/197: {Matching; Classification}
- G07F: COIN-FREED OR LIKE APPARATUS (coin sorting G07D3/00; coin testing G07D5/00; {handling coins or paper currencies apart from payment activated apparatus G07D; payment architectures, schemes or protocols G06Q20/00})
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06V: IMAGE OR VIDEO RECOGNITION OR UNDERSTANDING
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION

## Abstract

Provided, in an aspect, is a method for improving security in an automated teller machine (ATM) network, which includes prompting a user, via the ATM, to provide a biometric sample; receiving the sample from a biometric device of the ATM; determining that the sample is not blacklisted; and allowing the user to complete a transaction. Because the method includes storing anonymized event details, which include the biometric sample separate from user-identifying information, the method both improves privacy for law-abiding users and deters malicious use by others.

## Claims

### Claim 1

A computer-implemented method for improving security in an automated teller machine (ATM) network comprising a plurality of ATM devices, the method comprising
receiving, at an ATM device of the ATM network, a transaction request from a user associated with a user-identifying information;
prompting the user, via the ATM device, to provide a biometric sample;
receiving, through a biometric sensor of the ATM device, the biometric sample of the user;
determining, by the ATM device, that the biometric sample is not blacklisted by communicating with a server configured to compare the received biometric sample against biometric sample information stored within a blacklist database; and
allowing the user to complete, by the ATM device, the transaction associated with the user in response to determining that the biometric sample is not blacklisted,
wherein the server is configured to store anonymized event details comprising a location of the transaction, a date and time of the transaction, an amount for the transaction, and the biometric sample, wherein the anonymized event details include information different from the user-identifying information associated with the user completing the transaction on the ATM device.

### Claim 2 (depends on 1)

The computer-implemented method of claim 1, comprising determining that the biometric sample has a quality level that passes a predetermined threshold.

### Claim 3 (depends on 1)

The computer-implemented method of claim 1, comprising determining that the biometric sample has a quality level that passes a predetermined threshold after receiving one or more prior biometric samples with insufficient quality after the transaction request.

### Claim 4 (depends on 1)

The computer-implemented method of claim 1, wherein the biometric sample is selected from the group consisting of a face scan, iris scan, retina scan, fingerprint, palm print, hand vein pattern, finger geometry, voice profile, signature, and ear scan.

### Claim 5 (depends on 1)

The computer-implemented method of claim 1, wherein the biometric sample is not used for identifying the user before allowing the user to complete the transaction.

### Claim 6 (depends on 1)

The computer-implemented method of claim 1, wherein the biometric sample is stored separately from a transaction log that comprises user-identifying information.

### Claim 7 (depends on 1)

The computer-implemented method of claim 1, comprising, in response to determining at a later time that the transaction was fraudulent, providing the biometric sample to a law enforcement agency.

### Claim 8 (depends on 1)

The computer-implemented method of claim 1, comprising, in response to determining that the transaction increases a ratio of a number of transactions per biometric sample for the biometric sample beyond a predetermined ratio, updating the blacklist database to include the biometric sample in the blacklist database.

### Claim 9 (depends on 1)

The computer-implemented method of claim 1, comprising, before prompting the user for a biometric sample, acquiring an image of the user and determining that the image quality is poor.

### Claim 10 (depends on 1)

The computer-implemented method of claim 1, wherein the blacklist database comprises a database selected from an agency database, a customer database, a bank database, and a combination thereof.

### Claim 11 (depends on 10)

The computer-implemented method of claim 10, wherein the agency database comprises matches for biometric samples that have been reported by law enforcement agencies.

### Claim 12 (depends on 10)

The computer-implemented method of claim 10, wherein the customer database comprises matches for biometric samples that are associated with fraudulent transactions reported by customers.

### Claim 13 (depends on 10)

The computer-implemented method of claim 10, wherein the bank database comprises matches for biometric samples that have been flagged by a bank.

### Claim 14

An automated teller machine (ATM) with improved security, the ATM comprising:
a biometric sensor for receiving a biometric sample from a user associated with a user-identifying information;
a processor; and
a non-transitory computer-readable medium storing instructions executable by the processor to:
prompt the user to provide a biometric sample;
receive the biometric sample of the user from the biometric sensor;
evaluate a biometric quality value for the biometric sample;
determine that the evaluated biometric quality value is acceptable;
determine that the biometric sample is not blacklisted by communicating with a server configured to compare the received biometric sample against biometric sample information stored within a blacklist database; and
allow the user to complete the transaction associated with the user in response to determining that the biometric sample is not blacklisted,
wherein the server is configured to store anonymized event details comprising a location of the transaction, a date and time of the transaction, an amount for the transaction, and the biometric sample, wherein the anonymized event details include information different from the user-identifying information associated with the user completing the transaction on the ATM device.

### Claim 15 (depends on 14)

The ATM of claim 14, wherein the biometric sample comprises a face scan, iris scan, retina scan, fingerprint, palm print, hand vein pattern, finger geometry, voice profile, signature, and ear scan.

### Claim 16 (depends on 14)

The ATM of claim 14, wherein the server is configured to store a transaction log that comprises user-identifying information separately from the biometric sample.

### Claim 17 (depends on 14)

The ATM of claim 14, wherein the ATM comprises the non-transitory computer-readable medium storing instructions executable by the processor to, before any prompt to the user for a biometric sample, acquire an image of the user via a camera, and determine that the image has an unacceptable image quality.

### Claim 18 (depends on 14)

The ATM of claim 14, wherein the blacklist database is remote to the ATM.

### Claim 19 (depends on 18)

The ATM of claim 18, wherein the biometric sample is blacklisted when it is matched in at least one of an agency database, a customer database, and a bank database.

### Claim 20

A method for improving security in an automated teller machine (ATM) device, the method comprising acquiring an image of an ATM user via a camera of the ATM device;
determining an inability to recognize a face of the ATM user in the acquired image;
determining that the user requests a transaction at the ATM device;
prompting the user, via the ATM device, to provide a biometric sample;
receiving, through a biometric sensor of the ATM device, the biometric sample of the ATM user;
evaluating a biometric quality score for the biometric sample;
determining that the biometric quality score passes a predetermined threshold;
determining that the biometric sample is not blacklisted by communicating with a server configured to compare the biometric sample against biometric sample information stored within at least one biometric blacklist database; and
allowing the user to complete the transaction in response to determining that the biometric sample is not blacklisted,
wherein the server is configured to store anonymized event details comprising a location of the transaction, a date and time of the transaction, an amount for the transaction, and the biometric sample, wherein the stored anonymized event details include information different from the user-identifying information associated with the user completing the transaction on the ATM device.